
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
File: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft (raw, json)
Hash identifier: ka8ObQ/jX2bTNgRZlaNbnOU7Lzmb+QurCg146tDcODw=
Subject key identifier: 6F:DD:A7:24:BC:E6:2A:81:40:CB:A8:24:21:FC:CB:24:7B:D3:38:C9
Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Certificate serial: 34493FCEBFDE8D1D6A26C056AF75B25349AE6481
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:11:52 +0000
Manifest this update: Tue 12 May 2026 20:06:52 +0000
Manifest next update: Wed 13 May 2026 22:27:52 +0000
Files and hashes: 1: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl (hash: 6n1BcOz+jUv2IQE64cJKF+q+FkUMeGM0sGaohLjtEzw=)
2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:49:3f:ce:bf:de:8d:1d:6a:26:c0:56:af:75:b2:53:49:ae:64:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Validity
Not Before: May 12 20:06:52 2026 GMT
Not After : May 13 22:27:52 2026 GMT
Subject: CN=6FDDA724BCE62A8140CBA82421FCCB247BD338C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:df:da:5f:6b:cd:fd:7f:05:1e:7f:b5:47:
c3:35:45:94:d0:d4:f0:fa:e2:c5:8d:22:52:f8:15:
89:c9:ac:04:7d:ee:be:68:52:32:5f:ee:fe:b3:ae:
18:f3:51:a5:7e:d0:71:08:2c:4d:ea:be:8d:d8:a2:
85:ce:b5:18:4b:18:21:c0:2f:a6:06:72:75:26:ec:
f1:a0:b3:2e:93:7f:c5:0c:5f:9d:fe:20:89:0b:6c:
3a:e4:93:8b:83:53:a8:01:88:09:17:28:f9:5f:31:
3d:d0:52:92:d7:35:da:45:72:4b:24:d1:83:9c:be:
26:58:89:5b:17:1e:97:69:8d:f6:66:72:ce:c5:88:
b6:cf:5b:30:06:b7:00:70:95:9a:9b:8f:7b:18:61:
90:44:7e:ac:cb:e2:d8:84:5e:ec:41:ae:0e:82:4a:
c5:ce:ff:b4:21:cd:3e:0c:d5:11:73:96:45:5e:f5:
2c:6d:ec:54:4a:41:0d:d4:ea:54:41:83:bd:4f:d6:
5e:33:06:16:c2:b7:63:22:aa:ee:ef:19:8f:32:8c:
17:87:d5:98:d6:78:98:41:f0:71:75:67:4b:78:04:
27:2b:80:8c:d8:60:66:22:1d:27:3e:ff:d5:72:49:
e1:fd:e9:c3:61:47:46:b7:85:80:5d:c0:34:da:81:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DD:A7:24:BC:E6:2A:81:40:CB:A8:24:21:FC:CB:24:7B:D3:38:C9
X509v3 Authority Key Identifier:
keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7d:cf:f8:59:43:8c:79:0e:7a:bc:0e:3b:70:35:b1:ef:54:
63:f3:63:02:1f:d2:10:95:8a:de:e1:47:c4:54:62:68:22:2a:
0f:71:6e:cb:65:fa:4f:01:6a:bb:f4:37:9d:c2:83:9d:4d:44:
26:f3:cd:b8:3f:a6:c0:c1:62:9f:c5:82:32:2d:7c:87:71:a5:
54:aa:61:83:ea:35:31:f4:95:25:c5:6b:f1:cc:c6:49:22:1c:
01:d8:32:24:fe:bb:38:30:ef:96:fc:5f:e8:3c:e1:c8:3e:f5:
61:4b:6b:54:c3:27:52:90:5f:bb:e6:7b:b9:97:ff:06:c2:d5:
05:ce:26:34:d5:5e:f8:ab:ba:b7:96:86:e1:a6:49:1f:25:1d:
97:26:b1:c9:55:9e:41:11:9d:24:37:1a:1a:29:f0:f9:a5:de:
16:e9:0d:26:e3:b1:57:5d:f4:05:44:74:4f:13:69:c6:db:75:
29:82:61:ff:09:85:82:c6:ee:c1:68:39:19:40:08:86:11:ed:
2c:21:33:56:09:cf:d1:bb:da:aa:9a:60:8f:e1:83:ac:e6:32:
4a:d5:a1:b9:fa:3b:f6:9c:d0:87:43:ee:50:8c:e3:cb:7a:db:
27:aa:19:5a:d2:68:60:97:00:b8:aa:a6:25:5f:aa:38:85:5d:
58:c4:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:05 2026 by rpki-client